Lucene search
GitHub_MCVELIST:CVE-2021-32664HistoryOct 19, 2021 - 5:45 p.m.
CVE-2021-32664 Reflected XSS in Combodo/iTop
2021-10-1917:45:12
CWE-79
GitHub_M
www.cve.org
3
combodo itop
xss
run query
administrator
web based
it service management
open source
cve-2021-32664
versions 2.6.5
2.7.5
resolved
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
AI Score
7.9
Confidence
High
EPSS
0.001
Percentile
40.4%
Combodo iTop is an open source web based IT Service Management tool. In affected versions there is a XSS vulnerability on “run query” page when logged as administrator. This has been resolved in versions 2.6.5 and 2.7.5.
CNA Affected
[
{
"product": "iTop",
"vendor": "Combodo",
"versions": [
{
"status": "affected",
"version": "< 2.6.5"
},
{
"status": "affected",
"version": ">= 2.7.0, < 2.7.5"
}
]
}
]Related
nvd
nvd
CVE-2021-32664
2021-10-19 18:15:07
prion
prion
Cross site scripting
2021-10-19 18:15:00
osv
osv
CVE-2021-32664
2021-10-19 18:15:07
cve
cve
CVE-2021-32664
2021-10-19 18:15:07
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
AI Score
7.9
Confidence
High
EPSS
0.001
Percentile
40.4%
Related for CVELIST:CVE-2021-32664